HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedPIIIdentity (basic)Government IDMediumContained

Pisenti & Brinker LLP

bd_377cd907a245a0e5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 21, 2022

Filed

Oct 19, 2023

To disclose

43 weeks

Affected

4state residents only

Linked

5 filings

Confidence

65%

Full breach record for Pisenti & Brinker LLP →

Pisenti & Brinker LLP notified Montana residents of unauthorized access to an employee email account between Dec 1-21, 2022. The firm detected the breach on Dec 21, 2022, and confirmed personal information was accessed after forensic review completed Sept 21, 2023. Affected data likely included PII and government IDs. The firm engaged external cybersecurity professionals and offered one year of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 20 days

discovery → filing · 43 weeks / 302 days

Dec 1, 2022

Begins

Dec 21, 2022

Discovered

Oct 19, 2023

Filed

vs. sector median

+24 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_5e2060d2e80d3bfa2023-10-19Verified
California State AGbd_b7e9b2f34fde89312023-10-19Verified
Massachusetts State AGbd_b936d385f10c327d2023-10-19Verified
Indiana State AGbd_c716fa34a7da004b2023-10-19Verified

Name: Pisenti & Brinker LLP
norm: pisenti brinker

Name: Pisenti & Brinker LLP
norm: pisenti brinker
Industry: Professional Servicesllm

Discovered: Dec 21, 2022
Breach occurred: Dec 1, 2022 – Dec 21, 2022
Undetected for: 20 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering a complimentary one-year membership of Experian IdentityWorks
Changes made: Continually evaluate and modify practices to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 43 weeks(302 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGOct 19 · first

California State AGOct 19 · first

Massachusetts State AGOct 19 · first

Indiana State AGOct 19 · first

Montana State AGOct 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-778.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 19, 2023
Raw hash: 37dffb28c7a89b6f32e236cbdc8feb02a175f6db04b12488b282f8058a439bef

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityPisenti & Brinker LLP

Victim entityPisenti & Brinker LLP

Incidentdiscovered Dec 21, 2022

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov